prevent users from seeing other users' show pages